Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Stanford Subscribe
Filtered by product Webauth
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-2106 2 Debian, Stanford 2 Debian Linux, Webauth 2019-12-10 5.0 MEDIUM 7.5 HIGH
webauth before 4.6.1 has authentication credential disclosure
CVE-2009-2945 1 Stanford 1 Webauth 2009-09-15 4.3 MEDIUM N/A
weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.